Solved How to unlock Hard Drive locked by hacker

January 28, 2016 at 21:20:23
Specs: Windows XP
I was fooled by a HACKER and he put a lock on my hard drive. I can't boot into Windows as it asks me for the password I don't have. I reported him but they say no one can help me. I have Kill Disk and using this I can see when he did these things but they say there is nothing I can do. I really need some of the info on my hard disk. Is there any help for me?
Thanks
Barbara

See More: How to unlock Hard Drive locked by hacker

Report •


✔ Best Answer
February 1, 2016 at 13:34:44
"I was tricked by a hacker that said he was from Microsoft"
That's better, now we have a picture of how you know & what happened.

Try this tool, with a bit of luck, it will automatically fix the problem.

Offline NT Password & Registry Editor, Bootdisk. Forgot your Windows admin password?
http://pogostick.net/~pnh/ntpasswd/
http://pcsupport.about.com/od/tools...
Tutorial
http://www.winability.com/how-to-er...
http://www.howtogeek.com/96805/how-...
https://askleo.com/ive_lost_the_pas...



#1
January 28, 2016 at 22:53:26
Can you get into Safe mode or the bios?

Report •

#2
January 29, 2016 at 11:34:47
It's an XP computer and it's asking for a windows password? Sometimes you can log onto the ADMINISTRTOR account which often is not password protected. Use the F8 boot menu and choose one of the safe mode options. ADMINISTRATOR should show as one of the users. Choose that and see if it loads. If so go to User Accounts in control panel and remove the password from the hacked account.

If that doesn't work out, someone here previously posted this link which should help:

http://pogostick.net/~pnh/ntpasswd/


Report •

#3
January 29, 2016 at 13:43:34
And if you do manage to get back in... safeguard all your personal immediately; by copying to dvd at least, and an external hard drive too if possible. Then make a recovery disk... Even better make an image pf the system. Then you have a couple of options to fall back on if need to rebuild the system anon...

Develop the habit of copying (safeguarding) your personal files to external storage - regularly, Then if you do hit trouble as now, at least most, if not all, your files are safe?

Also run a few pest removers... and I'll defer to johnw to guide you through that process.... Johnw is much better versed in such matters - not the least highjackers... And there are one or two others here as well, equally well versed... (Daveincaps, XpUser, to mention but two.) Ideally run the cleaners/pest removers befor copying files to external storage; and making the recovery disks, and/image; so as to ensure they are clean...


Report •

Related Solutions

#4
January 29, 2016 at 20:49:30
If those do not work try booting into a Live Linux Disk and copying off anything you need that is important before proceeding. After that you can always reload the OS and not lose important stuff.

Dave: I thought that default top level Admin is only available automatically in Pro version and you need to force it active before it is available in Home versions of XP. Am I wrong?

You have to be a little bit crazy to keep you from going insane.


Report •

#5
January 29, 2016 at 22:11:13
That could be true. I never paid attention to which version was on the system, only that it sometimes worked and sometimes didn't. I didn't have that many opportunities to experiment.

Report •

#6
January 30, 2016 at 06:00:28
I think that there is a command line trick out there to activate the high level admin account and that might be the answer here.
I might have been wrong, here is what I was thinking about and it appears to be for Windows 7:
http://www.sevenforums.com/tutorial...

You have to be a little bit crazy to keep you from going insane.


Report •

#7
January 30, 2016 at 16:55:04
"I might have been wrong, here is what I was thinking about and it appears to be for Windows 7"
Yep Fingers, XP is different.

How to enable administrator account windows xp
http://windowsxp.mvps.org/admins.htm
http://www.pctimelimit.com/how_to_e...
https://techjourney.net/unhide-the-...
http://www.petri.co.il/add_the_admi...


Report •

#8
January 30, 2016 at 20:52:38
Ok, so it IS hidden in XP Home as well, I thought so....
I just could not remember for sure and a Quick Google hunt only found the W7 version.
Thank you and I hope that these will help the OP also (That's what we are here for).

You have to be a little bit crazy to keep you from going insane.


Report •

#9
February 1, 2016 at 12:22:02
My windows is Win 10 upgrade. A hacker put a password on my hard drive so I can;t boot into windows. I can't boot to Safe Mode either. Any help PLEASE.......I downloaded an ISO file and burnt it to a CD and tried to boot from it with no luck.

message edited by Granv


Report •

#10
February 1, 2016 at 12:43:41
"A hacker put a password on my hard drive so I can;t boot into windows"

How do you know?
Upload a photo or photos of what messages you are seeing. Check the quality of the photo, to make sure we can see what you are seeing.

Image Uploader ( I upload to Imgur.com for images & zippyshare for files. Neither need an account )
http://www.softpedia.com/get/Intern...
http://zenden.ws/imageuploader_ru
How to use for images.
http://i.imgur.com/mWxzNlv.gif
http://i.imgur.com/ODCCcPf.gif
http://i.imgur.com/zalhLtW.gif
For other files.
http://i.imgur.com/FhtnM6c.gif
http://i.imgur.com/Wg3nZ4G.gif
http://i.imgur.com/txFkgpT.gif


Report •

#11
February 1, 2016 at 13:06:40
I can't take pictures of anything. I was tricked by a hacker that said he was from Microsoft. I believed him because I just upgraded to Win 10. He was making changes to my laptop and when I asked him to stop he wouldn't. He saved the changes before I could pull the plug.He told me he would fix it for me if I would pay him, but he made me so mad I hung up on him. I'm 71 and I love the pc but I'm not a tech and I can't afford to take it to a shop.That is why I'm asking for any help.

Report •

#12
February 1, 2016 at 13:34:44
✔ Best Answer
"I was tricked by a hacker that said he was from Microsoft"
That's better, now we have a picture of how you know & what happened.

Try this tool, with a bit of luck, it will automatically fix the problem.

Offline NT Password & Registry Editor, Bootdisk. Forgot your Windows admin password?
http://pogostick.net/~pnh/ntpasswd/
http://pcsupport.about.com/od/tools...
Tutorial
http://www.winability.com/how-to-er...
http://www.howtogeek.com/96805/how-...
https://askleo.com/ive_lost_the_pas...


Report •

#13
February 1, 2016 at 13:46:49
Sorry I've never used these forums before. If I download and make a CD. will I loose all my files and programs?

Report •

#14
February 1, 2016 at 13:57:28
"will I loose all my files and programs?"
If you are saying, you have not done the one of the basics in computing, that is backup, you should do so now, in your situation anything can happen.

Take the hard drive out of your comp, slave it to a good comp & recover your files.

Make sure you read the tutorials in my previous post.


Report •

#15
February 1, 2016 at 14:04:56
Logically you will use another computer (not the one that is in trouble) to make the CD Johnw is suggesting.

The boot disk Johnw is suggesting will not load onto the hard drive, or actually affect your personal files when you boot that problem computer with the CD.

Harking back to my earlier reply #3...

As you are naturally concerned about your personal files... perhaps take the time etc. to recover/safeguard them first?

Go to ubuntu.com and download the 'free" ISO for ubuntu, which save to a hard drive; then burn it to a DVD. Boot with that DVD. It will load itself (a Linux variant) into RAM only; it will not touch the hard drive itself.

Once it has installed itself and booted into a windows style desktop, you can locate the hard drive. Having done that you can (hopefully) simply copy all your files to DVD. Check the copies are OK on a least one other working system (if possible).

Then you can set about recovering a working system, safe in the knowledge that your files are safeguarded elsewhere; just in-case there is a risk to them...

And again as earlier advised, develop the habit of regularly copying/duplicating all your personal files to external storage. That way in event of similar nasty attacks... your files are safe elsewhere.

Incidentally MS never contact anyone personally - unless you request their assistance first. Even then there are checks that are required to ensure both sides of the discussion are legit...; MS will not ask for login/password details.


Report •

#16
February 1, 2016 at 14:21:19
Here is some extra info after googling.

Unlocking After the Microsoft Support Phone Scam
https://fixedit.itxpress.biz/2015/0...
SOLUTION: “This is Microsoft Support” telephone scam – Computer ransom lockout
http://triplescomputers.com/blog/ca...
Sneaky trick by tech support scammers
http://www.bleepingcomputer.com/for...
How to remove Syskey and Administrator password
http://computernetworkingnotes.com/...


Report •

#17
February 1, 2016 at 15:09:20
It seems the password is on the hard disk. or the disk is encrypted.
Can you get into BIOS?
Keep tapping F8 key to get the boot menu. Then select the CD drive with your ISO.

Report •

#18
February 1, 2016 at 18:10:12
RID…………
01f4
01f7
01f5
03ea
03e9


How do I change the RID as it is locked and I still can’t use my laptop?


……………..
Administrator
DefaultAccount
Guest
HomeGroupUsers
Laotop

USER ACCOUNTS


Admin?
ADMIN
ADMIN


ADMIN


Lock?
*Blank*
*Blank*
*Blank


Report •

#19
February 1, 2016 at 18:20:43
UNLOCK C: is the command.

How to lock or unlock the hard drive
http://www.computerhope.com/issues/...

This has a Command Prompt.
Lazesoft Recovery Suite Home Edition
http://www.softpedia.com/get/System...
http://www.lazesoft.com/lazesoft-re...
Tutorials
http://www.lazesoft.com/guide.html
Screenshot ( SS )
http://i.imgur.com/0tReqKT.gif

message edited by Johnw


Report •

#20
February 3, 2016 at 10:25:49
I have everything unlocked except the first one that says (Admin?) Lock?. this is the one stopping the boot up. It still asks for a password. I tried to change it but the program says Cannot find value <\SAM\Domains\Account\Users\Names\Admin?\@>.
I forgot to say I can't use this SATA Drive as a slave. My desktop won't open it. I can see it in the device manager but it doesn't show up anywhere else.

message edited by Granv


Report •

#21
February 3, 2016 at 14:39:46
"My desktop won't open it"
Does that have an UDE drive?
If so, jumper it & the Sata drive both as Master.

cannot find value sam domains account users names administrator @
http://bit.ly/1NQQp3G


Report •


Ask Question